$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.mft File: 472a2488-5465-4b11-8a3d-5dc990d29dd5.mft (raw, json) Hash identifier: cNyMUSk3CZSqkbcM6nUG7xsBNGZxeqrFB6eTl14TqUQ= Subject key identifier: EC:D8:15:4C:9D:61:1A:E4:08:9F:3B:CA:D5:D3:CC:20:73:7D:01:29 Authority key identifier: 4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06 Certificate issuer: /CN=472a2488-5465-4b11-8a3d-5dc990d29dd5 Certificate serial: 010D0C9F432858436FFEAF301654D5443D0D6080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.mft Manifest number: 010D0C9F4328584073A84FB58169E7D81106DDA7 Signing time: Wed 04 Oct 2023 11:00:03 +0000 Manifest this update: Wed 04 Oct 2023 11:00:03 +0000 Manifest next update: Fri 06 Oct 2023 11:00:00 +0000 Files and hashes: 1: 1f264b32-211e-3446-8e85-f87cadf38b4d.roa (hash: PvVI9Rbg5clTp6ydOWQejGh5ONWjux09wuWFTuPPqYE=) 2: 21a5e779-1be2-35e6-ba98-3c017d76f392.roa (hash: l1ByRfcG5xSQeQPW0TBUF223odGpgSLlVstmURExmfM=) 3: 472a2488-5465-4b11-8a3d-5dc990d29dd5.crl (hash: DmBvgy45QPGUGJweNDXF7ssOsp4HPHjhb484g7uqCqA=) 4: 6ce4213b-1d38-3496-8379-2b651ece3221.roa (hash: F37khb9Cb224ODepqvcl14/W/hzegwwBBz40Rws90Eo=) 5: e3338de1-c785-34b3-8676-6220676a4943.roa (hash: K3DV1d1SJAPAbY62TCD0JmRkx7Okwh12PpTWmDqVSbo=) 6: e461f23e-3476-3e07-a653-dcdd0f3aa8a5.roa (hash: yPRCrCkU6CGpK5sxp9anbZaz9uDkcgic4aJT7L+JGl0=) 7: fe185983-ff6b-3cc5-8184-9a5c1959020b.roa (hash: 8rz3xYbgnqAGrfh+/MiXBlpBX1IgRhrf6XCcqXKfz0s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Oct 2023 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:6f:fe:af:30:16:54:d5:44:3d:0d:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472a2488-5465-4b11-8a3d-5dc990d29dd5 Validity Not Before: Oct 4 11:00:03 2023 GMT Not After : Oct 6 11:00:00 2023 GMT Subject: CN=e3c2328f-48ae-4637-ac33-a36c50e1e1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a3:d5:d3:72:3e:27:b3:32:50:e5:b3:ad:1b: 35:f3:bd:84:eb:16:6b:28:8d:d1:f5:d8:17:2f:73: 9d:eb:39:59:a0:4f:98:0d:50:d9:64:7a:45:12:e7: 74:cc:1b:01:06:9f:6f:52:3f:f1:80:34:fd:16:a0: 68:67:96:4c:13:da:cf:6c:15:a8:4d:52:43:50:5d: 91:50:c9:67:8c:b6:a9:71:cf:7a:0c:2c:90:66:57: 29:0f:2f:5b:a4:87:3b:55:ea:47:9c:b3:57:55:d7: de:79:6b:41:bf:18:30:d1:05:76:f3:d2:05:66:6f: 60:4c:e1:f5:6c:83:eb:0c:56:ba:be:94:ff:04:9f: 5e:49:71:95:ec:cc:d7:17:58:23:ee:84:01:0d:96: 35:8d:a3:93:56:6b:fe:df:d1:81:93:2a:c5:c7:fc: f6:13:ec:8c:10:4c:a3:c6:86:76:1b:84:67:72:78: 90:45:2d:4a:95:e9:d6:be:f5:48:d6:2e:41:ce:f1: 7f:99:1e:bd:1a:19:86:44:5d:fd:18:70:d8:ed:2c: 11:43:76:55:ca:70:04:bc:ce:7a:c1:46:3f:cd:dc: ea:c4:3e:cb:22:6d:39:20:7e:fd:f1:89:30:f6:98: 3a:e5:50:63:c0:77:63:94:9d:65:b5:d9:04:19:25: 3e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D8:15:4C:9D:61:1A:E4:08:9F:3B:CA:D5:D3:CC:20:73:7D:01:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.crl X509v3 Authority Key Identifier: keyid:4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:06:7b:1e:33:77:66:18:ed:51:8f:c5:49:1e:54:e7:c8:76: c2:8f:9c:5d:06:db:60:db:e8:c9:00:ff:ce:bc:59:a4:51:51: f1:fb:ab:88:f5:e0:bd:a3:9c:18:53:5f:16:65:e2:79:4e:07: db:7e:62:92:30:be:94:58:6e:c7:80:a0:dc:fd:0d:d4:13:b9: 81:2e:b8:4c:38:f8:99:8c:f5:ae:86:9b:ce:d5:72:fb:ab:d8: 1a:a4:8b:e3:e9:d7:c0:f4:0e:ff:e1:85:7c:8f:a2:65:3e:b0: ee:ac:22:b9:ac:f4:85:b2:03:e7:34:1d:5b:36:53:37:3d:15: 0f:3d:d3:1c:f9:a9:5c:2f:18:ad:d3:f3:e2:b9:75:9f:c6:85: 1f:be:c0:3b:51:dd:61:83:1e:24:73:95:23:5f:84:90:52:e8: 8d:14:f8:fe:16:8a:44:3f:c2:15:5a:58:72:d7:50:e0:75:f9: 2a:ed:4f:37:fa:ef:b9:49:25:14:14:7e:11:06:84:84:39:69: 3d:25:ce:47:23:5b:4e:11:99:5a:0a:20:c2:ae:27:fd:39:35: 8e:5a:5a:fa:31:81:e6:c3:06:94:96:37:27:14:9d:d2:03:c2: e5:84:db:33:b4:52:7d:f6:df:47:a6:25:85:87:34:76:aa:44: 5b:f2:16:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWENv/q8wFlTVRD0NYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyYTI0ODgtNTQ2NS00YjExLThhM2QtNWRjOTkwZDI5 ZGQ1MB4XDTIzMTAwNDExMDAwM1oXDTIzMTAwNjExMDAwMFowLzEtMCsGA1UEAxMk ZTNjMjMyOGYtNDhhZS00NjM3LWFjMzMtYTM2YzUwZTFlMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6PV03I+J7MyUOWzrRs1872E6xZrKI3R9dgX L3Od6zlZoE+YDVDZZHpFEud0zBsBBp9vUj/xgDT9FqBoZ5ZME9rPbBWoTVJDUF2R UMlnjLapcc96DCyQZlcpDy9bpIc7VepHnLNXVdfeeWtBvxgw0QV289IFZm9gTOH1 bIPrDFa6vpT/BJ9eSXGV7MzXF1gj7oQBDZY1jaOTVmv+39GBkyrFx/z2E+yMEEyj xoZ2G4RncniQRS1KlenWvvVI1i5BzvF/mR69GhmGRF39GHDY7SwRQ3ZVynAEvM56 wUY/zdzqxD7LIm05IH798Ykw9pg65VBjwHdjlJ1ltdkEGSU+mQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOzYFUydYRrkCJ87ytXTzCBzfQEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NzJh MjQ4OC01NDY1LTRiMTEtOGEzZC01ZGM5OTBkMjlkZDUvNDcyYTI0ODgtNTQ2NS00 YjExLThhM2QtNWRjOTkwZDI5ZGQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDcyYTI0ODgtNTQ2NS00YjExLThh M2QtNWRjOTkwZDI5ZGQ1LzQ3MmEyNDg4LTU0NjUtNGIxMS04YTNkLTVkYzk5MGQy OWRkNS5jcmwwHwYDVR0jBBgwFoAUS5Vy8tRPGj9GaAZ+QYJzWSyGwAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzJhMjQ4OC01NDY1LTRiMTEtOGEzZC01ZGM5 OTBkMjlkZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqBnseM3dmGO1Rj8VJHlTn yHbCj5xdBttg2+jJAP/OvFmkUVHx+6uI9eC9o5wYU18WZeJ5TgfbfmKSML6UWG7H gKDc/Q3UE7mBLrhMOPiZjPWuhpvO1XL7q9gapIvj6dfA9A7/4YV8j6JlPrDurCK5 rPSFsgPnNB1bNlM3PRUPPdMc+alcLxit0/PiuXWfxoUfvsA7Ud1hgx4kc5UjX4SQ UuiNFPj+FopEP8IVWlhy11Dgdfkq7U83+u+5SSUUFH4RBoSEOWk9Jc5HI1tOEZla CiDCrif9OTWOWlr6MYHmwwaUljcnFJ3SA8LlhNsztFJ99t9HpiWFhzR2qkRb8hZS -----END CERTIFICATE-----Generated at Wed Oct 4 11:27:37 2023 by rpki-client on console-ams.rpki-client.org